CVE-2023-1370
[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software.
Published:Mar 13, 2023
Last Modified:Feb 27, 2025
EPS:Mar 13, 2023
EPSS Score:0.00012
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Json-smart Project
Product
Json-smart
Json-smart Project
Json-smart
Vendor
Redhat
Product
Amq Clients
Redhat
Amq Clients
Vendor
Redhat
Product
Amq Streams
Redhat
Amq Streams
Vendor
Redhat
Product
Camel K
Redhat
Camel K
Vendor
Redhat
Product
Camel Quarkus
Redhat
Camel Quarkus
Vendor
Redhat
Product
Camel Spring Boot
Redhat
Camel Spring Boot
Vendor
Redhat
Product
Jboss Fuse
Redhat
Jboss Fuse
Vendor
Redhat
Product
Ocp Tools
Redhat
Ocp Tools
Vendor
Redhat
Product
Openshift
Redhat
Openshift
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
